GLI-23: Video Lottery Terminals. Version: 1.0. Release Date: October 10, 2011

Transcription

1 STANDARD SERIES GLI-23: Video Lottery Terminals Version: 1.0 Release Date:

2 This Page Intentionally Left Blank

3 ABOUT THIS STANDARD This Standard has been produced by Gaming Laboratories International, LLC for the purpose of providing independent certifications to suppliers under this Standard and complies with the requirements set forth herein. A supplier should submit equipment with a request that it be certified in accordance with this Standard. Upon certification, Gaming Laboratories International, LLC will provide a certificate of compliance evidencing the certification to this Standard.

4 This Page Intentionally Left Blank

5 Table of Contents CHAPTER OVERVIEW - STANDARDS FOR VIDEO LOTTERY TERMINALS Introduction Acknowledgment of Other Standards Reviewed Purpose of Technical Standards Other Documents That May Apply Definition of a Video Lottery Terminal CHAPTER MACHINE REQUIREMENTS HARDWARE Physical Security Machine and Player Safety Environmental Effects on Game Integrity Hardware Requirements-Other Video Lottery Terminal Wiring Machine Identification Tower Light and Audible Alarm Manipulation of Power Supply Diverter and Drop Box Requirements Requirements for External Doors/ External Compartments The Logic Door and Logic Area Coin/Token and Currency Compartments Program Memory, Non-Volatile Memory and Non-Volatile Devices Used to Store Program Memory Contents of Critical Memory Maintenance of Critical Memory Program Storage Device Requirements Control Program Requirements Independent Control Program Verification Printed Circuit Board (PCB) Patch Wires Switches and Jumpers Video Monitor/Touch Screens Coin or Token Acceptors Bill Validators Machine Metering of Bill Validator Events Bill Validator Locations Bill Validator Stacker Requirements Credit Redemption Coin Hoppers Printers Ticket/Voucher Validation Ticket/Voucher Information Ticket/Voucher Issuance and Redemption CHAPTER SOFTWARE REQUIREMENTS Introduction Rules of Play Random Number Generator (RNG) Requirements Payout Percentages, Odds and Limits Table of Contents Page 5

6 3.5 Bonus Games Extra Credits Wagered During Bonus Games Mystery Awards Multiple Games on the Video Lottery Terminal Electronic Metering within the Video Lottery Terminal Tokenization Residual Credits Communication Protocol Error Conditions Program Interruption & Resumption Door Open/Close Taxation Reporting Limits Test/Diagnostic Mode (Demo Mode) Video Lottery Terminal Disable Procedures Game History Recall Table of Contents Page 6

7 CHAPTER OVERVIEW - STANDARDS FOR VIDEO LOTTERY TERMINALS 1.1 Introduction General Statement. Gaming Laboratories International, LLC (GLI) has been testing video lottery terminals since Over the years, we have developed numerous standards for jurisdictions all over the world. In recent years, many jurisdictions have opted to ask for standards tests without creating their own standards documents. In addition, with technology changing almost monthly, new technology is not being incorporated quickly enough into existing standards due to the long process of administrative rulemaking. This document is one of several that will put forth GLI s Standards for Gaming Equipment. This document, GLI Standard 23, will set forth the technical Standards for video lottery terminals Document History. This document is an essay from many standards documents from around the world. Some GLI has written; some, such as the Australian and New Zealand National Standard, were written by Industry Regulators with input from test laboratories and video lottery terminal manufacturers. We have taken each of the standards documents, merged each of the unique rules together, eliminating some rules and updating others, in order to reflect both the change in technology and the purpose of maintaining an objective, factual standard. We have listed below, and given credit to, agencies whose documents we reviewed prior to writing this Standard. It is the policy of Gaming Laboratories International, LLC to update this document as often as possible to reflect changes in technology, testing methods, or cheating methods. This document will be distributed without charge to all those who request it. It may be obtained by downloading it from our website at or by writing to us at: Chapter One: Overview Standards for Video Lottery Terminals Page 7

8 Gaming Laboratories International, LLC 600 Airport Road Lakewood, NJ (732) Tel (732) Fax 1.2 Acknowledgment of Other Standards Reviewed General Statement. These Standards have been developed by reviewing and using portions of the documents from the organizations listed below. We acknowledge the regulators who have assembled these documents and thank them: a) The Alberta Gaming and Liquor Commission; b) The Atlantic Lottery Corporation; c) The Manitoba Gaming Control Commission; d) The Oregon State Lottery; e) The Saskatchewan Liquor and Gaming Authority; f) Western Canadian Lottery Commission g) GSA G2S and S2S protocol standards. *Please note a comprehensive revision history of this document is available upon request. 1.3 Purpose of Technical Standards Purpose. The purpose of this Technical Standard is as follows: a) To eliminate subjective criteria in analyzing and certifying video lottery terminal operation. b) To only test those criteria that impact the credibility and integrity of a video lottery terminal from both the Revenue Collection and Player s perspective. Chapter One: Overview Standards for Video Lottery Terminals Page 8

9 c) To create a standard that will insure that video lottery terminals in casinos are fair, secure, and able to be audited and operated correctly. d) To distinguish between local public policy and laboratory criteria. At GLI, we believe that it is up to each local jurisdiction to set public policy with respect to gaming. e) To recognize that non-gaming testing (such as electrical testing) should not be incorporated into this standard but left to appropriate test laboratories that specialize in that type of testing. Except where specifically identified in the standard, testing is not directed at health or safety matters. These matters are the responsibility of the manufacturer, purchaser, and operator of the equipment. f) To construct a standard that can be easily changed or modified to allow for new technology. g) To construct a standard that does not specify any particular method or algorithm. The intent is to allow a wide range of methods to be used to conform to the standards, while at the same time, to encourage new methods to be developed No Limitation of Technology. One should be cautioned that this document should not be read in such a way that limits the use of future technology. The document should not be interpreted that if the technology is not mentioned, then it is not allowed. Quite to the contrary, as new technology is developed, we will review this standard, make changes and incorporate new minimum standards for the new technology. 1.4 Other Documents That May Apply Other Standards. This standard covers the actual requirements for single player video lottery terminals in casinos. The following other standards may apply: a) GLI-12 Progressive Gaming Devices; b) GLI-13 On-Line Monitoring and Control Systems (MCS) and Validation Systems; c) GLI-14 Finite Scratch Ticket and Pull-Tan Systems; d) GLI-16 Cashless Systems; e) GLI-17 Bonusing Systems; Chapter One: Overview Standards for Video Lottery Terminals Page 9

10 f) GLI-18 Promotional Systems; g) GLI-20 Kiosks; h) GLI-21 Client Server System Standards; i) GLI-28 Player User Interface Systems; and j) Specific Jurisdictional Requirements 1.5 Definition of a Video Lottery Terminal General Statement. A video lottery terminal at a minimum will utilize randomness in determination of prizes, contain some form of activation to initiate the selection process, and make use of a methodology for delivery of the determined outcome. Each video lottery terminal is connected to a centralized computer system that allows the lottery jurisdiction to monitor game play and perform control functions. Chapter One: Overview Standards for Video Lottery Terminals Page 10

11 CHAPTER MACHINE REQUIREMENTS HARDWARE 2.1 Physical Security General Statement. A video lottery terminal shall be robust enough to resist forced entry. 2.2 Machine and Player Safety General Statement. Electrical and mechanical parts and design principals of the video lottery terminal must not subject a player to any physical hazards. The gaming test laboratory shall not make any finding with regard to Safety and Electromagnetic Compatibility (EMC) testing, as that is the responsibility of the manufacturer of the terminals or those that purchase the terminals. Such Safety and EMC testing may be required under separate statute, regulation, law, or Act and should be researched accordingly, by those parties who manufacture or purchase said terminals. The Gaming Test Laboratory shall not test for, be liable for, nor make a finding relating to these matters. 2.3 Environmental Effects on Game Integrity Game Integrity Standard. The Laboratory will perform certain tests to determine whether or not outside influences affect game fairness to the player or create cheating opportunities. This certification applies exclusively to tests conducted using current and retrospective methodology developed by Gaming Laboratories International, LLC (GLI). During the course of testing, GLI inspects for marks or symbols indicating that a terminal has undergone product safety compliance testing. GLI also performs, where possible, a cursory review of submissions and information contained therein related to Electromagnetic Interference (EMI), Radio Frequency Interference (RFI), Magnetic Interference, Liquid Spills, Power Fluctuations and Environmental conditions. Electrostatic Discharge Testing is intended only to simulate Chapter Two: Machine Requirements Hardware Page 11

12 techniques observed in the field being used to attempt to disrupt the integrity of video lottery terminals. Compliance to any such regulations related to the aforementioned testing is the sole responsibility of the terminal manufacturer. GLI claims no liability and makes no representations with respect to such non-gaming testing. A video lottery terminal shall be able to withstand the following tests, resuming game play without operator intervention: a) Random Number Generator The random number generator and random selection process shall be impervious to influences from outside the terminal, including, but not limited to, electro-magnetic interference, electro-static interference, and radio frequency interference; b) Electro-Static Interference Protection against static discharges requires that the video lottery terminals conductive cabinets be earthed in such a way that static discharge energy shall not permanently damage, or permanently inhibit the normal operation of the electronics or other components within the video lottery terminal. Video lottery terminals may exhibit temporary disruption when subjected to a significant electro-static discharge greater than human body discharge, but they shall exhibit a capacity to recover and complete any interrupted play without loss or corruption of any control or critical data information associated with the video lottery terminal. The tests will be conducted with a severity level of a maximum of 27KV air discharge. 2.4 Hardware Requirements-Other General Statement. Each video lottery terminal shall meet the following hardware requirements: a) Microprocessor Controlled Be controlled by one (1) or more microprocessors or the equivalent in such a manner that the game outcome is completely controlled by the microprocessor and not determined by any mechanical or electro-mechanical device. It should be noted that this does not include display mechanisms that display the game outcome. b) On/Off Switch An on/off switch that controls the electrical current shall be located in a Chapter Two: Machine Requirements Hardware Page 12

13 place which is readily accessible within the interior of the video lottery terminal so that power cannot be disconnected from outside of the video lottery terminal using the on/off switch. The on/off positions of the switch shall be labeled. Where a video lottery terminal cabinet contains more than one power switch, each switch must clearly identify what unit it supplies power to. 2.5 Video Lottery Terminal Wiring General Statement. The video lottery terminal shall be designed so that power and data cables into and out of the video lottery terminal can be routed so that they are not accessible to the general public. This is for game integrity reasons only, not for health and safety. Securityrelated wires and cables that are routed into a logic area shall be securely fastened within the interior of the device. Note: The Laboratory will make no determination as to whether the video lottery terminal installation conforms to local electrical codes, standards and practices. 2.6 Machine Identification General Statement. A video lottery terminal shall have an identification badge affixed to the exterior of the cabinet by the manufacturer, that is not removable without leaving evidence of tampering and this badge shall include the following information: a) The manufacturer; b) A unique serial number; c) The video lottery terminal model number; d) The date of manufacture; and e) Any other requirements specified by the jurisdiction Certification Mark. The certification mark of an UL, CSA or equivalent certification mark MUST be placed on or near the exterior identification plate. Chapter Two: Machine Requirements Hardware Page 13

14 2.7 Tower Light and Audible Alarm Tower Light. The video lottery terminal may have a light located conspicuously on its top that automatically illuminates when a player has won an amount or is collecting credits that the terminal cannot automatically pay, an error condition has occurred (including Door Open ), or a Call Attendant condition has been initiated by the player. For terminals such as the bartop style, it is permissible for the tower light to be shared among other video lottery terminals or be substituted by an audible alarm. Note: The Laboratory will make no determination as to tower light color or flash sequence. Furthermore, alternative means to alert appropriate personnel will be considered on a case-bycase basis Audible Alarm. An audible alarm must be provided to signal door open events, error conditions, or other events provided for in jurisdictional requirements. 2.8 Manipulation of Power Supply Surges. The video lottery terminal shall not be adversely affected, other than resets, by surges or dips of ± 20% of the supply voltage. NOTE: It is acceptable for the equipment to reset provided no damage to the equipment or loss or corruption of data is experienced in the field. Upon reset the game must return to its previous state. It is acceptable for the game to return to a game completion state provided the game history and all credit and accounting meters reflect a completed game Service Outlet. The video lottery terminal must have an AC service outlet located within the cabinet interior and should provide for a service light Fuses. The power supply used in a video lottery terminal must be appropriately fused or protected by circuit breakers. The amperage rating of all fuses and circuit breakers must be clearly stated on or about the fuse or the breaker. Chapter Two: Machine Requirements Hardware Page 14

15 2.9 Diverter and Drop Box Requirements Diverter. For games that accept coins or tokens, the software shall ensure that the diverter directs coins to the hopper or to the drop box when the hopper is full. The hopper full detector shall be monitored to determine whether a change in diverter status is required. If the state of the detector changes, the diverter shall operate as soon as possible, or within ten (10) games, after the state change, without causing a disruption of coin flow, or creating a coin jam. Hopper-less gaming devices shall always divert coins to the drop box Drop Box. If the video lottery terminal is equipped to accept coins or tokens, then the following rules shall be met: a) Each video lottery terminal equipped to accept coins or tokens shall contain a separate drop bucket or drop box to collect and retain all such coins or tokens that are diverted into the drop box; b) A drop bucket shall be housed in a locked compartment separate from any other compartment of the video lottery terminal; and c) There must be a method to monitor the drop box area, even if manufactured by a different company. It is preferred that the monitoring method provide for notification to the on-line system Requirements for External Doors/ External Compartments General Requirements. a) Doors shall be manufactured of materials that are suitable for allowing only legitimate access to the inside of the cabinet (i.e., locks, doors, and their associated hinges shall be capable of withstanding determined and unauthorized efforts to gain access to the inside of the video lottery terminal and shall leave evidence of tampering if such an entry is made); Chapter Two: Machine Requirements Hardware Page 15

16 b) The seal between the cabinet and the door of a locked area shall be designed to resist the entry of objects; c) All external doors shall be locked and monitored by door access sensors, which when opened shall cease game play, disable all acceptance, and enter an error condition, which at a minimum shall illuminate the tower light, if equipped, and send the error condition to the on-line system, when applicable; d) It shall not be possible to insert a device into the video lottery terminal that will disable a door open sensor when the video lottery terminal s door is shut without leaving evidence of tampering; e) If a door access detection system is disconnected, the video lottery terminal shall interpret this state as the door being opened. f) The sensor system shall register an external door as being open when the door is moved from its fully closed and locked position. g) The video lottery terminal shall communicate door access to an online system when power is applied The Logic Door and Logic Area General Statement. The logic area is a separately locked cabinet area (with its own locked door), which houses electronic components that have the potential to significantly influence the operation of the video lottery terminal. There may be more than one (1) such logic area in a video lottery terminal Electronic Components. Electronic components that are required to be housed in one (1) or more logic areas are: a) A CPU and any program storage device that contains software that may affect the integrity of gaming, including but not limited to the game, accounting, system communication, and peripheral firmware devices involved in or which significantly influence the operation and calculation of game play, game display, game result Chapter Two: Machine Requirements Hardware Page 16

17 determination, or game accounting, revenue, or security. Any exceptions will be evaluated on a case-by-case basis; b) Communication controller electronics and components housing the communication program storage device. Any exceptions will be evaluated on a case-by-case basis; and c) The NV memory back-up device, if applicable, shall be kept within a locked logic area Logic Area Security. The logic area of the electronic component which will house the items in section above must have the capability to be sealed using a jurisdictionally approved method Logic Area Access. Logic area(s) must contain a mechanism to detect the Door Open error condition where the video lottery terminal must deactivate and notify the Central Communications System. a) If the area access detection devices rely on an interruptible power supply for normal operation, and the power fails, the logic area cabinet must be assumed to have been accessed, and the video lottery terminals must deactivate and notify the Central Communications System accordingly when power is restored. b) The detection system must be designed to detect when the logic area cabinet has been accessed. c) If the logic area is capable of being removed from a video lottery terminal cabinet in its entirety without physically opening or accessing the logic area, the logic area must be fitted with a device or devices that detect removal Coin/Token and Currency Compartments General Statement. The coin or token and currency compartments shall be locked separately from the main cabinet area Access to Currency. Chapter Two: Machine Requirements Hardware Page 17

18 a) Access to the currency storage area is to be secured via separate key locks and shall be fitted with sensors that indicate door open/close or stacker receptacle removed, provided power is supplied to the terminal. b) Access to the currency storage area is to be through two (2) levels of locks (the relevant outer door plus one other door or lock) before the currency container can be removed Program Memory, Non-Volatile Memory and Non-Volatile Devices Used to Store Program Memory Non-Volatile (NV) Memory Requirements. The following are the memory requirements for video lottery terminals. a) The video lottery terminal shall have the ability to retain data for all critical memory as defined herein and shall be capable of maintaining the accuracy of all information required for Thirty (30) days after power is discontinued from the video lottery terminal; b) For rechargeable battery types only, if the battery back-up is used as an off chip battery source, it shall re-charge itself to its full potential in a maximum of twenty-four (24) hours. The shelf life shall be at least five (5) years; c) Non-Volatile memory that uses an off-chip back-up power source to retain its contents when the main power is switched off shall have a detection system which will provide a method for software to interpret and act upon a low battery condition before the battery reaches a level where it is no longer capable of maintaining the memory in question; and d) Clearing non-volatile memory shall require access to the locked logic area or other secure method provided that the method can be controlled by the regulatory agency Function of NV Memory Reset. Following the initiation of an NV memory reset procedure (utilizing a certified NV memory clear method), the game program shall execute a routine, which initializes all bits in critical NV memory to the default state. All memory locations intended to be cleared as per the NV memory clear process shall be fully reset in all cases. For games that allow for partial NV memory clears, the methodology in doing so must be accurate. Chapter Two: Machine Requirements Hardware Page 18

19 Default Reel Position or Game Display. The default reel position or game display immediately after an NV memory reset shall not be the advertised top award on any selectable line. The default game display, upon entering game play mode, shall also not be the advertised top award. This applies to the base game only and not to any secondary bonus features. This does not apply to games or paytables selected after the initial game play Configuration Settings. It shall not be possible to change a configuration setting that causes an obstruction to the electronic accounting meters without an NV memory clear. Notwithstanding, a change to the denomination must be performed by a secure means, which includes access to the locked logic area or other secure method provided that the method can be controlled by the regulator (i.e., Password or PIN-based controls) Contents of Critical Memory General Statement. Critical memory is used to store all data that is considered vital to the continued operation of the video lottery terminal. This includes, but is not limited to: a) All required electronic meters, including last bill data and power up and door open metering; b) Current credits; c) Video lottery terminal/game configuration data; d) Information pertaining to the last ten (10) games with the game outcome (including the current game, if incomplete). Video lottery terminals offering games with a variable number of free games, per base game, may satisfy this requirement by providing the capability to display the last 50 free games in addition to each base game; e) Software state (the last normal state, last status or tilt status the video lottery terminal software was in before interruption); f) Any paytable configuration information residing in memory; and g) It is a recommendation that, at minimum, a log of the last 100 significant events be kept in critical memory. Chapter Two: Machine Requirements Hardware Page 19

20 2.15 Maintenance of Critical Memory General Statement. Critical memory storage shall be maintained by a methodology that enables errors to be identified. This methodology may involve signatures, checksums, partial checksums, multiple copies, timestamps and/or effective use of validity codes. Note: The Maintenance of Critical Memory section is not intended to preclude the use of alternate storage media types, such as hard disk drives, for the retention of critical data. Such alternate storage media is still expected to maintain critical data integrity in a manner consistent with the requirements in this section, as applicable to the specific storage technology implemented Comprehensive Checks. Comprehensive checks of critical memory shall be made following game initiation, but prior to display of game outcome to the player. It is recommended that critical memory is continuously monitored for corruption. The methodology shall detect failures with an extremely high level of accuracy Unrecoverable Critical Memory. An unrecoverable corruption of NV memory shall result in an error. The memory error shall not be cleared automatically and shall result in a tilt condition, which facilitates the identification of the error and causes the video lottery terminal to cease further function. The NV memory error should not cause any corrupted data to be sent to the host. All pertinent player information such as credits, bet amount, must be available for review, if possible. An unrecoverable NV memory error shall require a full NV memory clear performed by an authorized person NV Memory and Program Storage Device Space. Non-volatile memory space that is not critical to video lottery terminal security (e.g., video or sound) is not required to be validated. Chapter Two: Machine Requirements Hardware Page 20

21 2.16 Program Storage Device Requirements General Statement. The term Program Storage Device is defined to be the media or an electronic device that contains the critical control program components. Device types include but are not limited to EPROMs, compact flash cards, optical disks, hard drives, solid state drives, USB drives, etc. This partial list may change as storage technology evolves. All program storage devices shall: All program storage devices shall: a) Be housed within a fully enclosed and locked logic compartment; b) Be clearly marked with sufficient information to identify the software and revision level of the information stored in the device. In the case of media types on which multiple programs may reside it is acceptable to display this information via the attendant menu; c) Validate themselves during each processor reset; d) Validate themselves the first time they are used; and e) CD-ROM, DVD, and other optical disk-based Program Storage shall: i. Not be a re-writeable disk; ii. The Session shall be closed to prevent any further writing Control Program Requirements Control Program Verification. a) EPROM-based Program Storage: i. Video lottery terminals which have control programs residing in one or more EPROMs must employ a mechanism to verify control programs and data. The mechanism must use at a minimum a checksum; however, it is recommended that a Cyclic Redundancy Check (CRC) be used (at least 16-bit). b) Non-EPROM Program Storage shall meet the following rules: Chapter Two: Machine Requirements Hardware Page 21

22 i. The software shall provide a mechanism for the detection of unauthorized and corrupt software elements, upon any access and subsequently prevent the execution or usage of those elements by the video lottery terminal. The mechanism must employ a hashing algorithm which produces a message digest output of at least 128 bits. ii. In the event of a failed authentication, after the game has been powered up, the video lottery terminal should immediately enter an error condition and display an appropriate error. This error shall require operator intervention to clear and shall not clear until; the data authenticates properly, following the operator intervention, or the media is replaced or corrected, and the video lottery terminals memory is cleared. NOTE: Control Program Verification Mechanisms will be evaluated on a case-by-case basis and approved by the regulator and the independent testing laboratory based on industry standard security practices. c) Alterable Media shall meet the following rules in addition to the requirements outlined in (b): i. Employ a mechanism which tests unused or unallocated areas of the alterable media for unintended programs or data and tests the structure of the media for integrity. The mechanism must prevent further play of the video lottery terminal if unexpected data or structural inconsistencies are found. ii. Employ a mechanism for keeping a record anytime a control program component is added, removed, or altered on any alterable media. The record shall contain a minimum of the last ten (10) modifications to the media and each record must contain the date and time of the action, identification of the component affected the reason for the modification and any pertinent validation information. NOTE: Alterable Program Storage does not include memory devices typically considered to be alterable which have been rendered read-only by either a hardware or software means. Chapter Two: Machine Requirements Hardware Page 22

23 Program Identification. Program storage devices which do not have the ability to be modified while installed in the video lottery terminal during normal operation shall be clearly marked with sufficient information to identify the software and revision level of the information stored in the devices. See also Section 2.16 for specific information Independent Control Program Verification General Statement. The terminal shall have the ability to allow for an independent integrity check of the terminal s software from an outside source and is required for all control programs that may affect the integrity of the game. This must be accomplished by being authenticated by a third-party device, which may be embedded within the game software (see NOTE below), by having an interface port for a third-party terminal to authenticate the media, or by allowing for removal of the media such that it can be verified externally. This integrity check will provide a means for field verification of the software to identify and validate the program. The test laboratory, prior to terminal approval, shall evaluate the integrity check method. Note: If the authentication program is contained within the game software, the manufacturer must receive written confirmation from the test laboratory prior to submission System Verification. Should a central system support the use of online verification for verifying video lottery terminals, the terminal shall support system verification and be fully compatible with the central system in this respect Printed Circuit Board (PCB) PCB Identification Requirements. The requirements for PCB identification shall include the following: a) Each printed circuit board (PCB) shall be identifiable by some sort of name (or number) and revision level. Where feasible, this identification should be readily viewed without removal of the PCB from the video lottery terminal; Chapter Two: Machine Requirements Hardware Page 23

24 b) The top assembly revision level of the PCB shall be identifiable; c) If track cuts and/or patch wires are added to the PCB, then a new revision number or level shall be assigned to the assembly; d) Manufacturers shall ensure that circuit board assemblies, used in their video lottery terminals, conform functionally to the documentation and the certified versions of those PCBs that were evaluated and certified by the test laboratory; and e) The Manufacturer s name, logo, or abbreviated symbol is recommended Patch Wires Documentation of Patch Wires & Track Cuts. All patch wires and track cuts shall be documented, in an appropriate manner, in the relevant service manual and/or service bulletin and shall be submitted to the test laboratory. This does not prohibit required repairs in the field Switches and Jumpers General Statement. If the video lottery terminal contains switches and/or jumpers, the following rules shall be met: a) All hardware switches or jumpers shall be fully documented for evaluation by the test laboratory; b) Hardware switches or other unsecure mechanisms must not exist which would alter the outcome of game play, paytables, payout percentages, counters, or other areas containing critical data or instructions Video Monitor/Touch Screens General Statement. All video monitor touch screens shall meet the following rules: Chapter Two: Machine Requirements Hardware Page 24

25 a) Touch screens shall be accurate and once calibrated, shall maintain that accuracy for at least the manufacturer s recommended maintenance period; b) A touch screen should be able to be re-calibrated via a secure method without access to the video lottery terminal cabinet other than opening the main door; and c) There shall be no hidden or undocumented buttons/touch points anywhere on the screen, that affect game play, and/or that impact the outcome of the game, except as provided for by the game rules Coin or Token Acceptors General Statement. If the video lottery terminal uses a coin/token acceptor, the acceptor shall accept or reject the coin/token on the basis of metal composition, mass, composite makeup, or an equivalent method to securely identify a valid coin/token. In addition, it shall meet the following rules: a) Each coin acceptor shall have the ability to be configured to accept certain denominations as indicated by jurisdictional regulations. b) An appropriate label indicating the denomination values of the coins accepted must be posted near the coin acceptor head. Alternatively, this information can be shown dynamically on the main game screen in a conspicuous location. c) Credit Meter Update on Coin/Token Insertion. Each valid coin/token inserted shall register the actual monetary value or the appropriate number of credits received for the denomination being used on the player s credit meter for the current game or bet meter. If registered directly as credits, the conversion rate shall be clearly stated, or be easily ascertainable from the video lottery terminal; d) Coin/Token Acceptor Security Features/Error Conditions. The coin acceptor shall be designed to prevent the use of cheating methods including but not limited to slugging (counterfeit coins), stringing (coin pullback), the insertion of foreign objects and any other manipulation that may be deemed as a cheating technique. Appropriate correlating error conditions shall be generated and the coin acceptor shall be disabled; Chapter Two: Machine Requirements Hardware Page 25

26 e) Rapidly Fed Coins. The video lottery terminal shall be capable of handling rapidly-fed coins/tokens or piggy backed coins/tokens so that occurrences of cheating are eliminated. Coins traveling too fast that do not register on the players credit meter shall be returned to the player; f) Direction Detectors. The video lottery terminal shall have suitable detectors for determining the direction and the speed of coin/token travel in the receiver. If a coin/token traveling at too slow of a speed or improper direction is detected, the video lottery terminal shall display a suitable error condition for at least thirty (30) seconds or be cleared by an attendant. g) Invalid Coins/Tokens. Coins/tokens deemed invalid by the acceptor shall be rejected to the coin tray and shall not be counted as credits; h) Coin Acceptor Error Conditions. Coin acceptors shall have a mechanism to allow software to interpret and act upon the following conditions: i. Coin-In Jam; ii. Coin Return Jam; iii. Reverse Coin-In (coin traveling wrong direction through acceptor); and iv. Coin Too Slow. NOTE: It is acceptable to report Coin-In Jam, Reverse Coin-In and Coin Too Slow as a generic Coin-In Error Bill Validators General Statement. All paper currency acceptance devices shall be able to detect the entry of valid bills, coupons, ticket/vouchers, or other approved notes, as applicable, and provide a method to enable the video lottery terminal software to interpret and act appropriately upon a valid or invalid input. The paper currency acceptance device(s) shall be electronically based and be configured to ensure that they only accept valid bills of legal tender, coupons, ticket/vouchers, or other approved notes, and must reject all other items. Rejected bills, ticket/vouchers, coupons or other unapproved notes should be returned to the player. Ticket/vouchers are paper slips that are treated as a unit of currency, which may be redeemed for cash or exchanged for credits on the Chapter Two: Machine Requirements Hardware Page 26

27 video lottery terminal. Coupons are paper slips primarily used for promotional purposes, which may be of a cashable or non-cashable value. The bill input system shall be constructed in a manner that protects against vandalism, abuse, or fraudulent activity. In addition, bill acceptance terminal(s) shall meet the following rules for all acceptable types of medium: a) Each valid bill, coupon, ticket/voucher or other approved note shall register the actual monetary value or the appropriate number of credits received for the denomination being used on the player s credit meter; b) Each bill validator shall have the ability to be configured by the operator to accept certain denominations as allowed by the regulator; c) An appropriate indication of the denomination values of the bills accepted (i.e. $5, $10, and $20) must be displayed near the bill validator head; d) Credit Meter update upon Bill Insertion. Credits shall only be registered when: i. The bill or other note has passed the point where it is accepted and stacked; and ii. The acceptor has sent the "irrevocably stacked" message to the video lottery terminal. e) Bill Validator Security Features. Each bill validator shall be designed to prevent the use of cheating methods such as stringing, the insertion of foreign objects and any other manipulation that may be deemed as a cheating technique. A method for detection of counterfeit bills must be implemented; f) Credit Acceptance Conditions. Acceptance of any bills, ticket/vouchers, Coupons or other approved notes for crediting to the credit meter shall only be possible when the video lottery terminal is enabled for play. Other states, such as error conditions, including door opens, audit mode and game play, shall cause the disabling of the bill validator system in addition to other input methods; g) Bill Validator Disabled on High Credit Balance. The video lottery terminal software must incorporate a function which will automatically disable the bill validator once the credit balance of the video lottery terminal or account, if appropriate, exceeds a limit specified by the jurisdiction. This dollar level may only be set, or changed, by either a downloadable parameter from the central system or other approved methods such as accessing the logic area of the terminal; Chapter Two: Machine Requirements Hardware Page 27

28 h) Bill Validator Error Conditions. Each video lottery terminal and/or bill validator shall have the capability of detecting and displaying the following error conditions (for bill validators, it is acceptable to disable or flash lights with respect to the bill validator itself): i. Stacker Full - It is recommended that an explicit stacker full error message not be utilized since this may promote a security issue. Rather, a message such as Bill Validator Malfunction or similar is suggested.); ii. Bill Jams; iii. Bill Validator Communication Fail; iv. Stacker Door Open (The stacker door is the door immediately prior to accessing the cashbox/stacker assembly); v. Stacker Removed; and vi. Bill Validator Malfunction not specified above Communications. All bill validators shall communicate to the video lottery terminal using a bi-directional protocol. In the event that the bill validator software can be downloaded, there must be some means whereby software associated with the bill validator is able to be verified by a secure signature checking method Factory Set Bill Validators. If bill validators are designed to be factory set only, it shall not be possible to access or conduct maintenance or adjustments to those bill validators in the field, other than: a) The selection of desired acceptance for bills, coupons, ticket/vouchers, or other approved notes and their limits; b) Changing of certified control program media or downloading of certified software; c) Adjustment of the bill validator for the tolerance level for accepting bills or notes of varying quality should not be allowed externally to the video lottery terminal. Adjustments of the tolerance level should only be allowed with adequate levels of security in place. This can be accomplished through lock and key, physical switch settings, or other accepted methods approved on a case-by-case basis; Chapter Two: Machine Requirements Hardware Page 28

29 d) Maintenance, adjustment, and repair per approved factory procedures; or e) Options that set the direction or orientation of acceptance Tokenization. For games that allow tokenization, the game shall receive monetary value from the bill or coin acceptor and post to the player s credit meter the entire amount inserted and display any fractional credits when applicable. It is acceptable for the terminal to store the fractional credits if one of the following conditions is met: a) The game displays the credit meter in dollars and cents; or b) The game informs the player that there are fractional credits stored on the terminal at an opportune time to avoid the possibility of the player walking away from the video lottery terminal without such knowledge. For specifics on how residual credits should be handled and displayed, please refer to the Tokenization/Residual Credits Sections Machine Metering of Bill Validator Events General Statement. A video lottery terminal, which contains a bill validator device, shall maintain sufficient electronic metering to be able to display the following: a) Total monetary value of all items accepted; b) Total number of all items accepted; c) A breakdown of the bills accepted: i. For bills, the game shall report the number of bills accepted for each bill denomination; and d) For all other notes (ticket/vouchers and coupons), the game shall have a separate meter that reports the number of items accepted, not including bills Bill Validator Recall. A video lottery terminal that uses a bill validator shall retain in its memory and display the last five (5) items accepted by the bill validator (i.e. currency, ticket/vouchers, coupons, etc.) The bill validator recall log may be combined or maintained Chapter Two: Machine Requirements Hardware Page 29

30 separately by item type. If combined, the type of item accepted shall be recorded with the respective timestamp Bill Validator Locations Bill Validator Location. If a video lottery terminal is equipped with a bill validator, it shall be located in a locked area of the video lottery terminal (e.g., require opening of the main door to access), but not in the logic area. Only the bill, ticket/voucher insertion area will be accessible by the player Bill Validator Stacker Requirements General Statement. Each bill validator shall have a secure stacker and all accepted items shall be deposited into the secure stacker. The secure stacker and its receptacle are to be attached to the video lottery terminal in such a manner so that they cannot be easily removed by physical force and shall meet the following rules: a) The bill validator device shall have the ability to detect a stacker full condition; and b) There shall be a separate keyed lock to access the stacker area. This keyed lock shall be separate from the main door. In addition, a separate keyed lock shall be required to remove the bills from the stacker; 2.28 Credit Redemption Credit Redemption. Available credits may be collected from the video lottery terminal by the player pressing a collect or cash out button at any time other than during: a) A game being played; b) Audit mode; c) Any door open; Chapter Two: Machine Requirements Hardware Page 30

31 d) Test mode; e) A Credit Meter or Win Meter increment, unless the entire amount is placed on the meters when the collect button is pressed; or f) An error condition provided the error condition prevents a valid cashout which is not supported through some other means Cashout Limit Exceeded. If credits are collected, and the total credit value is greater than or equal to a specific limit (e.g., hopper limit for hopper games, printer limit for printer games, etc.), an alternate regulatory approved method of payment may be used. Note: In certain situations the printing of multiple independent tickets, each below the ticket limit, is an acceptable alternative, if approved by the regulatory body Coin Hoppers General Statement. If coin hoppers are used, they are to be monitored, in all game states, by the video lottery terminal control program. Coin hoppers must have the ability to identify hopper coin jams, hopper empty, and extra coin paid conditions. In addition, coin hoppers shall prohibit manipulation by the insertion of a light source or any foreign object and there shall not be an abnormal payout when exposed to higher levels of electro-static discharge or if power is lost at any time during a payout. NOTE: Activities that result in the payout of a single extra coin (e.g. the removal and reinsertion of the hopper) are not considered an abnormal payout as long as it is accounted for as an extra coin paid Acceptable Hopper Locations. If a video lottery terminal is equipped with a hopper, it shall be located in a locked area of the video lottery terminal, but not in the logic area or the drop box. Access to the hopper shall require at a minimum opening of a secure external door. Chapter Two: Machine Requirements Hardware Page 31

32 Hopper Error Conditions. A video lottery terminal that is equipped with a hopper shall have mechanisms to allow control program software to interpret and act upon the following conditions: a) Hopper empty or timed out; b) Hopper jam; and c) Hopper runaway or extra coin paid out Printers Payment By Ticket/Voucher Printers. If the video lottery terminal has a printer that is used to make payments, the video lottery terminal may pay the player by issuing a printed ticket/voucher. The printer shall print on a ticket/voucher as indicated in section 2.31 and the video lottery terminal shall support the transmission of data to an on-line data system that records the following information regarding each payout ticket/voucher printed: a) Value of credits in local monetary units in numerical form; b) Time of day the ticket/voucher was printed in twenty-four (24) hour format showing hours and minutes; c) Date, in any recognized format, indicating the day, month, and year; d) Video lottery terminal number or machine number; and e) Unique validation number. NOTE: To further meet this requirement standard, the video lottery terminal shall have the ability to retain the last twenty five (25) ticket/voucher-out information* to resolve player disputes. In addition, an approved system shall be used to validate the payout ticket/voucher, and the ticket/voucher information on the central system shall be retained at least as long as the ticket/voucher is valid at that location. If offline voucher issuance is supported, the video lottery terminal MUST mask all but the last 4 digits of the validation number as displayed in the twenty five (25) ticket/voucher-out log. (*The ticket/voucher-out log may contain ticket/vouchers and receipts.) Chapter Two: Machine Requirements Hardware Page 32

33 Printer Location. If a video lottery terminal is equipped with a printer, it shall be located in a locked area of the video lottery terminal (i.e., require opening of a locked external door), but not be housed within the logic area or the drop box Printer Error Conditions. A printer shall have mechanisms to allow control program software to interpret and act upon the following conditions: a) Out of paper/paper low. It is permissible for the video lottery terminal to not lock up for these conditions; however, there should be a means for the attendant to be alerted; b) Printer jam/failure; and c) Printer disconnected. It is permissible for the video lottery terminal to detect this error condition when the game tries to print Ticket/Voucher Validation Payment By Ticket/Voucher Printer. Payment by ticket/voucher printer as a method of credit redemption is only permissible when: a) The video lottery terminal is linked to a computerized Ticket/Voucher Validation System, which allows validation of the printed ticket/voucher. Validation approval or information shall come from the Ticket/Voucher Validation System in order to validate ticket/vouchers. Ticket/vouchers may be validated at any location within a venue, as long as it meets the standards in this section. Provisions must be made if communication is lost, and validation information cannot be sent to the validation system, thereby requiring the manufacturer to have an alternate method of payment. The validation system must be able to identify duplicate ticket/vouchers to prevent fraud by reprinting and redeeming a ticket/voucher that was previously issued by the video lottery terminal; or b) By use of an approved alternative method that includes the ability to identify duplicate ticket/vouchers to prevent fraud by reprinting and redeeming a ticket/voucher that was previously issued by the video lottery terminal. Chapter Two: Machine Requirements Hardware Page 33